{"id":635761,"date":"2026-03-24T19:00:15","date_gmt":"2026-03-24T17:00:15","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=635761"},"modified":"2026-03-24T19:09:38","modified_gmt":"2026-03-24T17:09:38","slug":"wp-rugby-website-hacked","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/635761-wp-rugby-website-hacked.html","title":{"rendered":"Website of major rugby team in South Africa hacked"},"content":{"rendered":"\n

The WP Rugby website appears to have been hacked, with its news blog currently flooded with spam posts promoting online gambling.<\/p>\n\n\n\n

While many South African sports teams are sponsored by sports betting and online gambling companies, the posts on the WP Rugby website point to intermediaries promoting unlicensed overseas operators.<\/p>\n\n\n\n

Visitors to wprugby.com<\/em>‘s news section are currently met with a barrage of articles instead of the latest updates on the Western Province team.<\/p>\n\n\n\n

The attack is part of what is commonly referred to as SEO spam or \u201cspamdexing\u201d. It aims to hijack the high search engine authority of established websites to promote predatory gambling platforms.<\/p>\n\n\n\n

In this case, the spam posts on WP Rugby\u2019s website appear in Google News, further increasing the reach of the malicious content.<\/p>\n\n\n\n

These types of hacks often exploit outdated plugins or weak administrative credentials to gain unauthorised access to a website\u2019s backend.<\/p>\n\n\n\n

However, while the whole WP Rugby website appears to be running on WordPress, the rest of the site appears untouched, aside from its meta description, which shows up in Google.<\/p>\n\n\n\n

Western Province Rugby has faced organisational challenges in recent years, including being placed under administration by the South African Rugby Union (SARU) in 2021.<\/p>\n\n\n\n

Daily Maverick reported<\/a> at the time that SARU had no choice, as the provincial union faced hundreds of millions of rands in lawsuits and had cash flow problems.<\/p>\n\n\n\n

SARU announced in March 2025 that it had notified the administrator of the Western Province Rugby Football Union (WPRFU) to wind up the Union\u2019s period of administration.<\/p>\n\n\n\n

\u201cThe union was placed in administration when it was in a dire financial position, and its standards of governance were in disarray,\u201d it stated.<\/p>\n\n\n\n

\u201cThat is no longer the case, and to continue with administration was viewed as being unreasonable.\u201d<\/p>\n\n\n\n

The decision cleared the way for WPRFU to hold elections and restored its full voting rights once the process was completed by June 2025.<\/p>\n\n\n\n

\u201cThe decision was taken in acknowledgement of the union\u2019s financial stability following the conclusion of a private equity investment in its commercial arm.\u201d<\/p>\n\n\n\n

It said WP Rugby and the Stormers commercial entity were both restored to a stable financial position by March 2025.<\/p>\n\n\n\n

\u201cThe Exco determined it would be unreasonable to continue with administration, and the administrator was instructed to return control to the member,\u201d it said.<\/p>\n\n\n\n

Under SARU administration, the administrator was tasked with concluding a private equity deal, completing the move to the DHL Stadium, and managing the sale of the Newlands Stadium and other owned properties.<\/p>\n\n\n\n

\u201cThe first two responsibilities have been successfully discharged, and the proposal relating to the sale of certain properties, including Newlands rugby stadium, would now be the Union\u2019s sole responsibility.\u201d<\/p>\n\n\n\n

It noted that the equity transaction and the sale of Newlands and other properties required the approval of the Western Province Rugby Football Union clubs.<\/p>\n\n\n\n

The presented equity deal was approved. However, the clubs rejected a proposal to sell the properties on 10 June 2024.<\/p>\n\n\n\n

Screenshots of the WP Rugby website hack<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

Spam posts from WP Rugby appearing in Google News<\/h2>\n\n\n\n
\"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

The WP Rugby website has been breached and its news section flooded with spam promoting unlicensed overseas gambling sites.<\/p>\n","protected":false},"author":15,"featured_media":635762,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[22641,25239,103997,103998],"class_list":["post-635761","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-sa-rugby","tag-south-african-rugby-union-saru","tag-western-province-rugby-football-union-wprfu","tag-wp-rugby"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/635761"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=635761"}],"version-history":[{"count":5,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/635761\/revisions"}],"predecessor-version":[{"id":635769,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/635761\/revisions\/635769"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/635762"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=635761"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=635761"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=635761"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}